How to configure AWS CloudHSM CLI with configure-cli command?

hi,

for "sudo /opt/cloudhsm/bin/configure-cli -a <my_hsm>"

You use the private IP address (ENI) of one HSM in the cluster.

The configure-cli tool uses that one ENI IP to connect to the specified HSM, and then automatically discovers other HSMs in the cluster and updates the client configuration.

Scenario:

EC2 instance private IP: 10.0.0.123

HSM ENI (private IP): 10.10.10.232

sudo /opt/cloudhsm/bin/configure-cli -a 10.10.10.232

https://docs.aws.amazon.com/cloudhsm/latest/userguide/gs_cloudhsm_cli-install.html

Pre-requisites: -

Both are in same VPC. Ensure routing tables allow traffic between 10.0.0.123 and 10.10.10.232 Security groups and network ACLs allow traffic between 10.0.0.123 Security Groups / NACLs: Allow inbound and outbound traffic on port 2223 (used by CloudHSM) IAM permissions CloudHSM Client Installed

https://docs.aws.amazon.com/cloudhsm/latest/userguide/configure-sg-client-instance.html

Once's the CloudHSM clients installed environment variable :

https://docs.aws.amazon.com/cloudhsm/latest/userguide/command-line-tools.html

Best